Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File:                     FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier:          PJWnL+HGaQQ+wUgwju0mJTUpm9e1na1T5rdgNRylSAY=
Subject key identifier:   E7:F7:B7:43:8E:DC:83:2E:76:85:EF:3A:4F:9D:2C:B3:04:F2:DF:2B
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer:       /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial:       019D28F278357065A205B2D8B32629C76811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number:          12B8
Signing time:             Thu 26 Mar 2026 07:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:12 +0000
Files and hashes:         1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: fa2Y7rd4Y9/qOQV/hsgw0wqaqdTokQunq9UhXFA/ExQ=)
                          2: OdjD6-jie1gU1V0cRR0FziitCAg.roa (hash: MfGipVuvx0N4+V17kShStGKfSKXkomrNYWFKpDB6GCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:78:35:70:65:a2:05:b2:d8:b3:26:29:c7:68:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
        Validity
            Not Before: Mar 26 07:01:12 2026 GMT
            Not After : Mar 27 07:01:12 2026 GMT
        Subject: CN=e7f7b7438edc832e7685ef3a4f9d2cb304f2df2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:33:a2:7d:9b:0a:26:83:1f:25:5f:d0:87:
                    32:d0:6f:d9:7a:61:08:ee:a6:03:2f:38:39:aa:d9:
                    ec:3b:25:ca:d3:5e:56:fe:de:68:0b:51:7a:e1:bd:
                    c0:f3:25:75:0c:81:7e:d5:86:7d:d7:33:d6:37:ca:
                    f2:6c:84:da:d7:ab:ab:95:5d:d8:91:c3:5c:f7:05:
                    12:3c:f8:28:ba:ba:be:e4:a7:2a:85:9c:1c:d5:39:
                    4b:65:ba:c5:59:10:b1:07:9e:2b:f3:a7:9d:94:64:
                    02:41:af:d8:88:a3:fa:31:81:ce:dc:15:a4:68:d9:
                    c4:e1:4c:ce:e3:7d:43:26:d9:2f:1d:bf:04:27:53:
                    0d:fc:18:5e:c8:ff:40:2b:4c:b5:48:23:8d:3e:2a:
                    93:ab:7a:f6:00:99:fb:2c:55:7b:a8:d9:83:7f:d1:
                    06:9f:2e:69:02:55:05:5d:62:01:b0:70:ef:11:cb:
                    dd:4a:5b:64:78:0a:3f:d4:02:37:35:b5:c7:7e:1f:
                    6e:6f:ef:85:3b:89:42:35:a7:f2:e2:b6:15:6a:26:
                    c9:ed:e8:27:f1:7d:03:cf:d7:a9:27:18:de:11:b2:
                    34:b0:4c:9e:19:ae:a2:15:3f:02:fa:f9:49:a3:ac:
                    93:fb:1f:56:50:ce:7e:4b:a5:cc:61:e6:e9:a4:fa:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F7:B7:43:8E:DC:83:2E:76:85:EF:3A:4F:9D:2C:B3:04:F2:DF:2B
            X509v3 Authority Key Identifier:
                keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cf:96:a0:2a:24:dd:1a:1d:53:e1:cc:c6:fc:93:f5:11:0e:
         b0:eb:5d:c6:bf:7c:97:87:8a:0a:40:ca:91:f6:86:da:2f:5f:
         d1:5e:d4:9e:6a:03:bc:1f:2a:f3:cd:cd:a4:82:c4:7f:c6:ab:
         c3:d3:75:58:b4:a2:f5:12:01:ea:06:85:17:48:b7:dd:e6:63:
         5b:d4:1c:a2:2e:c4:de:73:10:5b:be:8f:3b:59:0a:9b:24:b9:
         5c:c5:86:a9:3a:8b:fa:f9:a6:92:a3:70:95:e7:57:a1:ce:39:
         7f:3c:2f:e1:eb:be:20:8f:61:e8:b0:16:94:bd:1c:3f:db:70:
         4c:4a:1e:e3:5e:a1:ab:fb:80:14:6d:c6:0c:55:f8:3c:13:7e:
         6d:d5:a5:7d:21:29:da:01:78:db:e5:7e:4c:aa:d7:34:07:e6:
         b0:f9:44:f3:96:80:d3:69:4f:2b:5f:20:29:ad:bb:88:61:0f:
         6e:e4:11:2d:f6:1f:06:37:65:df:6b:91:59:95:85:52:43:cb:
         39:2d:00:25:de:af:66:e5:cf:d9:b3:bc:00:71:31:83:e2:60:
         dd:b3:81:02:b9:32:00:25:8a:b2:8c:03:34:5b:7c:18:d5:cf:
         37:8b:aa:6d:38:f8:86:1e:a9:ee:eb:7b:b5:a2:0b:dc:8b:53:
         26:a5:4f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8ng1cGWiBbLYsyYpx2gRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmJjNmY2YmFjMTQyYTAzYWJiMWE3YWQ5MTY5MDY4M2Yw
M2E0ZGMwHhcNMjYwMzI2MDcwMTEyWhcNMjYwMzI3MDcwMTEyWjAzMTEwLwYDVQQD
EyhlN2Y3Yjc0MzhlZGM4MzJlNzY4NWVmM2E0ZjlkMmNiMzA0ZjJkZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rczon2bCiaDHyVf0Icy0G/ZemEI
7qYDLzg5qtnsOyXK015W/t5oC1F64b3A8yV1DIF+1YZ91zPWN8rybITa16urlV3Y
kcNc9wUSPPgourq+5KcqhZwc1TlLZbrFWRCxB54r86edlGQCQa/YiKP6MYHO3BWk
aNnE4UzO431DJtkvHb8EJ1MN/BheyP9AK0y1SCONPiqTq3r2AJn7LFV7qNmDf9EG
ny5pAlUFXWIBsHDvEcvdSltkeAo/1AI3NbXHfh9ub++FO4lCNafy4rYVaibJ7egn
8X0Dz9epJxjeEbI0sEyeGa6iFT8C+vlJo6yT+x9WUM5+S6XMYebppPrQ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf3t0OO3IMudoXvOk+dLLME8t8rMB8GA1UdIwQY
MBaAFBYrxva6wUKgOrsaetkWkGg/A6TcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTct
MGJlN2FhZThhMGQxLzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTctMGJlN2FhZThhMGQx
LzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZM+WoCok
3RodU+HMxvyT9REOsOtdxr98l4eKCkDKkfaG2i9f0V7UnmoDvB8q883NpILEf8ar
w9N1WLSi9RIB6gaFF0i33eZjW9Qcoi7E3nMQW76PO1kKmyS5XMWGqTqL+vmmkqNw
ledXoc45fzwv4eu+II9h6LAWlL0cP9twTEoe416hq/uAFG3GDFX4PBN+bdWlfSEp
2gF42+V+TKrXNAfmsPlE85aA02lPK18gKa27iGEPbuQRLfYfBjdl32uRWZWFUkPL
OS0AJd6vZuXP2bO8AHExg+Jg3bOBArkyACWKsowDNFt8GNXPN4uqbTj4hh6p7ut7
taIL3ItTJqVP9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:45 2026 by rpki-client